Questions On Strong Security

Strong Security Multiple User Keys Portable and No Installation Required, Accessibility Export To TXT, HTML, XML and CSV Files Import From Many File Formats Easy Database Transfer Support of Password Groups Time Fields and Entry Attachments Auto-Type, Global Auto-Type Hot Key and Drag&Drop Intuitive and Secure Clipboard Handling Searching and Sorting Multi-Language Support Strong Random Password Generator Plugin Architecture Open Source!

Strong Security
KeePass supports the Advanced Encryption Standard (AES, Rijndael) and the Twofish algorithm to encrypt its password databases. Both of these ciphers are regarded as being very secure. AES e.g. became effective as a U.S. Federal government standard and is approved by the National Security Agency (NSA) for top secret information.
The complete database is encrypted, not only the password fields. So, your user names, notes, etc. are encrypted, too.
SHA-256 is used as password hash. SHA-256 is a 256-bit cryptographically secure one-way hash function. Your master password is hashed using this algorithm and its output is used as key for the encryption algorithms.
In contrast to many other hashing algorithms, no attacks are known yet against SHA-256.
Protection against dictionary and guessing attacks: by transforming the final master key very often, dictionary and guessing attacks can be made harder.
In-Memory Passwords Protection: Your passwords are encrypted while KeePass is running, so even when the operating system caches the KeePass process to disk, this wouldn't reveal your passwords anyway.
[2.x] Protected In-Memory Streams: When loading the inner XML format, passwords are encrypted using a session key.
Security-Enhanced Password Edit Controls: KeePass is the first password manager that features security-enhanced password edit controls. None of the available password edit control spies work against these controls. The passwords entered in those controls aren't even visible in the process memory of KeePass.
The master key dialog can be shown on a secure desktop, on which almost no keylogger works. Auto-Type can be protected against keyloggers, too.
Also see the security information page.

Multiple User Keys
One master password decrypts the complete database.
Alternatively you can use key files. Key files provide better security than master passwords in most cases. You only have to carry the key file with you, for example on a floppy disk, USB stick, or you can burn it onto a CD. Of course, you shouldn't lose this disk then.
For even more security you can combine the above two methods: the database then requires the key file andthe password in order to be unlocked. Even if you lose your key file, the database would remain secure.
[2.x] Additionally, you can lock the database to the current Windows user account. The database can then only be opened by the same person who created it.
Also see keys information page.

Portable and No Installation Required, Accessibility
KeePass is portable: it can be carried on an USB stick and runs on Windows systems without being installed.
Installer packages are available, too, for the ones who like to have shortcuts in their Windows start menu and on the desktop.
KeePass doesn't store anything on your system. The program doesn't create any new registry keys and it doesn't create any initialization files (INI) in your Windows directory. Deleting the KeePass directory (in case you downloaded the binary ZIP package) or using the uninstaller (in case you downloaded the installer package) leaves no trace of KeePass on your system.
[1.x] KeePass requires GDI+ (which can be downloaded for free at Microsoft's website). Windows XP and higher already include GDI+; for Windows 2000 you need to install it, if it's not installed already. No .NET framework is required.
[2.x] KeePass requires the Microsoft .NET Framework (which can be downloaded for free at

Show More

Related Documents: Questions On Strong Security

Employment Responsibilities and Rights in Health Social Care and Children Essay